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PACKET PROTECTION TECHNIQUE 



BACKGROUND OF THE INVENTION 

1 . Field of the invention 

The present invention generally relates to restoration 
strategies in a packet transfer network composed of a plurality 
5 of routers, and in particular to a method and system for restoring 
data transmission when a fault occurs on a transmission line between 
routers . 

2 . Description of the Related Art 

There have been proposed restoration strategies for a packet 
10 transfer network composed of a plurality of routers, typically, 
the Internet . An example of a basic restoration method is to switch 
an initial route to a restored route when a failure has been detected 
between routers in the initial route. Such a basic restoration 
method needs to find a new route as an alternative route at its 
15 endpoint router by searching its routing table which is being 
updated according to the routing protocol. Accordingly, it will 
take much long until restoration- It is difficult to put it in 
practical use especially in the field of real-time data 
transmission such as voice and video data transmission. 
20 As another example of restoration technique, a router 
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network having a. proxy router has been disclosed in Japanese Patent 
Application Unexamined Publication No. 11-261620. The network 
environment of a LAN belonging to a router is previously copied 
to another router. When a failure occurs at the router, the other 
router serves as a proxy router of the failed router so that 
communications of the LAN belonging to the failed router can be 
maintained. 

It is possible to apply the line protection technique 
employed in SONET / SDH (Synchronous Optical NETwork/ Synchronous 
Digital Hierarchy) to the packet transfer network. More 
specifically, the same signal is transferred through both of 
working and protection lines , In case of working line cut or node 
failure, the same signal on the protection line can be transmitted 
to a destination node. However, all information are transferred 
through both working and protection line independently of its 
degree of importance, resulting in reduced efficiency on the use 
of the link bandwidth . 

Recently, to protect connections for packet communications, 
there has been proposed a protection and restoration strategy using 
a 1+1 protection method and a packet flow selector in Japanese 
Patent Application No. 10-349220 filed on December 9, 1998 
(Unexamined Publication No. P2000-174815A published on June 23, 
2000) , According to this strategy, when a packet carries important 
information, the packet is duplicated and the duplicate packets 
are transferred through different routes ♦ At the receiving node. 
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the first arrival of the packet Is used and the other duplicate 
packet is discarded. Such a strategy can avoid causing Important 
information to be lost due to link failure. 

However, the duplicate important packets flow through the 
network at all times. Therefore, the greater the amount of 
important information, the greater the amount of packet flow to 
he protected. This causes the efficiency on the use of the network 
bandwidth to he reduced. 
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SUMMARY OF THE INVENTION 

An object of the present invention is to provide a packet 
protection method and system which can achieve rapid restoration 
in case of fault occurrence without undesired reduction in 
efficiency on the use of network bandwidth. 

According to an aspect of the present invention, a 
restoration method for restoring a flow of packets in a packet 
transfer network composed of a plurality of routers, includes the 
steps of-, a) setting a working route and a reserved route in the 
packet transfer network, wherein the reserved route branches from 
the working route at a start -point router; at each of routers other 
than the start -point router on the working route, b) determining 
whether a failure occurs in a link to a next -hop router on the 
working route; c) determining whether an incoming packet is to be 



protected; d) when a packet to be protected is received in case 
of occurrence of the failure, sending the packet to be protected 
back to the start -point router; and at the start -point router, e) 
when receiving back the packet to be protected, forwarding it to 
the reserved route. When the start-point router receives a packet 
to be protected in case of occurrence of the failure, the 
start -point router forwards it to the reserved route. 

The working and reserved routers may be set by a network 
management server controlling each of the routers in the packet 
transfer network . 

The step (d) may Include the steps of: d.l) when a packet 
to be protected is received in case of occurrence of the failure, 
adding a protection control header to the packet to be protected 
to produce a return packet; and d.2) sending the return packet back 
to the start -point router. The step (e) may Include the steps of: 
e.l) receiving the return packet back from a next-hop router on 
the working route; e* 2 ) removing the protection control header from 
the return packet to produce an original packet to be protected; 
and e.3) forwarding the original packet to the reserved route. 

According to another aspect of the present invention, a 
packet transfer network includes; a plurality of routers; and a 
network management server for designing a packet protection 
network in which a working route and a reserved route are set by 
controlling designated routers which are involved in the working 
and reserved routes, wherein the reserved route branches from the 
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working route at a start-point router. Each of a plurality of 
designated routers fonning the working route, includes : a line 
failure detector for detecting a failure occurring in a link to 
a next -hop router on the working route; a table for storing 
5 information Indicating where a packet to be protected is forwarded 
to; and a packet distribution controller for, when a packet to be 
protected is received in case of occurrence of the failure, 
forwarding the packet to be protected depending on the information 
stored in the table. The designated routers other than the 

10 start -point router forwards the packet to be protected back to the 
start -point router in case of occurrence of the failure, wherein 
the start -point router forwards the packet to be protected received 
back from another router to the reserved route* 

The start-point router may be an ingress router to the packet 

15 protection network. The network management server may transfer 
the information of the table to each of the designated routers 
depending on which one of the start -point router and a transit 
router the designated router is . 

According to further another aspect of the present invention, 

20 in a packet protection network in which a working route and a 
reserved route are set by controlling designated routers which are 
involved in the working and reserved routes, wherein the reserved 
route branches from the working route at a start -point router, a 
router includes t a line failure detector for detecting a failure 

25 occurring in a link to a next -hop router on the working route; a 



table for storing information indioating where a packet to be 
protected is forwarded to; and a packet distribution controller 
for. when a packet to be protected is received in case of occurrence 
of the failure, forwarding the packet to be protected depending 
on the information stored in the table, wherein the designated 
r-outers other than the start-point router forwards the packet to 
be protected back to the start -point router in case of occurrence 
o£ the failure, wherein the start -point router forwards the packet 
to be protected received back from another router to the reserved 
route. 



BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a schematic diagram showing an example of the 
configuration of a packet protection network according to an 
embodiment of the present invention; 

Fig . 2 is a block diagram showing a network management server 
in the embodiment ; 

Fig, 3 is a block diagram showing a router in the embodiment; 

Fig. 4 is a flowchart showing a packet forwarding operation 
of an ingress router of the packet protection network according 
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to the embodiment; 

Fig. 5 is a diagram showing a format of a normal packet ; 

Fig. 6 is a diagram showing a format of a packet sent back 
to the ingress router in case of failure occurrence; 

Fig- 7 is a diagram showing a packet protection information 
management table in the ingress router; 

Fig . 8 is a schematic diagram showing an example of the packet 
protection network so as to explain an operation of a packet in 
case of failure occurrence according to the embodiment; 

Fig. 9 is a diagram showing a packet protection information 
management table in a router located in a transit section of the 
packet protection network; and 

Fig. 10 is a flowchart showing a packet forwarding operation 
of the transit router of the packet protection network. 



DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 



SYSTEM CONFIGURATION 
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As shown In Fig. 1, it is assumed fox- simplicity that a 
transmission line restoration system according to an embodiment 
of the present invention is composed of a sending terminal (X) 201, 
a receiving terminal (Y) 202 , a packet protection network 203 
5 composed of routers 204A-204F, and a network management server 205 . 

The sending terminal 201 is connected to the router 204A, 
in this example, which is the ingress to the packet protection 
network 203 - The receiving terminal 202 is connected to the router 
204F, in this example, which is the egress from the packet 
10 protection network 203, The routers 204A-204F are connected to 
the network management server 205 through respective ones of 
control lines 206.1 through 206.6, which may be dedicated lines 
or he implemented by using an existing network to transfer control 
data to them* 

15 xt is further assumed that the packet protection network 

203 has a working route from the router 204A to the router 204F 
through the routers 204B and 204C and a reserved route from the 
router 204A to the router 204F through the routers 204P and 204F. 
In this example, the respective routers 204A and 20 4F are also a 

20 start-point router and an end-point router of the working and 
reserved routes . 

The network management server 205 manages the packet 
protection network 203. In addition, the network management 
server 205 manages other packet protection networks (not shown). 

25 m other words, the network management server 205 manages the 
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routers 204A-204F so as to implement not only trie packet protection 
network 203 tout also trie other packet protection networks . 
Accordingly , trie routers 204a- 20 4F may have the same basic circuit 
configuration so as to function the present embodiment * 
5 A packet protection network is a network to which packet 

protection is applied, and, more specifically, "packet protection 
network" is defined as a network in which, in case of failure 
occurrence in an initial route, packets to he protected among 
packets 210 are transferred from the ingress around the failure 

10 to the egress hut other packets are not protected- Therefore, 
packets conveying very Important data such as medical data of an 
operation on a patient are protected so as to travel around the 
failure location to the egress router. On the other hand, packets 
conveying relatively low degrees of importance are not protected, 

15 so that these packets may he discarded in case of failure 
occurrence * 

In Fig* 1, In the case where another packet protection 
network is set or other sending and receiving terminals are 
determined, two routers other than routers 204A and 204F may be 

20 the ingress and egress, respectively- For example, if a sending 
terminal is connected to the router 204B, then the router 20 4B 
"becomes the ingress of a corresponding packet protection network. 
Further, the sending and receiving terminals 201 and 202 may be 
connected to respective ones of the routers 204A and 204F via 

25 another packet protection network. 
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NETWORK MANAGEMENT SERVER 
Referring to Fig- 2, the network management server 205 has 
a processor (CPU) 221 therein- which is connected to a user 
information input section 223, a data display and output section 
5 224, a storage device 225, and a router information transmission 
section 226 through a bus 222 such as data bus* 

The user information input section 223 is composed of a data 
input interface circuit and input device such as Keyboard or 
pointing device, a floppy disk drive, or an input device for 
10 inputting data through a network. A network manager (user) uses 
the user information input section 223 to enter various kinds of 
fundamental data for the failure restoration system. 

The data display and output section 224 is composed of data 
display and output interface circuit, a display such as CRT or LCD, 
and a printer. The display and printer may be omitted if they are 
not needed to operate the system. 

The storage device 225 is composed of a recording medium 
such as a hard disk, an optical disk, or a random access memory, 
and a necessary drive Interface circuit. The storage device 225 
has a plurality of memory areas 231-236 for storing various kinds 
of information as described hereafter. 

The memory area 231 stores a network management operating 
system program for operating the network management server 205. 
The memory area 232 stores a packet -protection route design program 
for designing an alternative route to perform packet protection. 
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The memory area 2 33 stores inter-router link information that is 
link information for each router, which has been inputted by the 
user operating the user information input section 223. The memory 
area 23 4 stores protection flow information regarding flows to be 
packet -protected, which has been inputted by the user operating 
the user Information input section 223. 

The memory area 235 stores a first packet -pro tec Lion 
information management table containing information regarding an 
ingress router (e.g. router 204A) to each of the packet protection 
networks including the packet protection network 203, 

The memory area 236 stores a second packet -protect ion 
information management table containing Information regarding a 
transit router (e.g. routers 204B-204E ) to each of the packet 
protection networks including the packet protection network 203 . 

The packet-protection route design program stored In the 
memory area 232 is executed on the processor 221 to determine how 
to transfer packets to the egress for each flow and which router 
is to be selected to transfer packets to the egress In case of 
failure occurrence based on the inter-router link information 
stored in the memory area 233 and the protection flow information 
stored in the memory area 234* The first and second packet- 
protection information management tables 235 and 236 are updated 
in response to the route design determined by the packet -protection 
route design program. The information contained in the first and 
second packet -protection information management tables 235 and 236 
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are transf erred to each of the routers 204A-204F through a 
corresponding control line. 

In this manner, packets that are previously designated by 
the user information input section 223 are transferred through the 
acLual network under the network environment designed by the 
packet -protection route design program stored in the memory area 
232 . 

ROUTER 

As described before, the routers 204A-204F have the same 
basic circuit configuration. Here, taking the router 204A as an 
example, the internal circuit configuration of a router will be 
described hereafter. 

Referring to Fig. 3, the router 204A is connected to N 
transmission lines 24^-241,, each of which is a bidirectional 
transmission line such as an optical cable. The router 204A is 
provided with N line input port circuits 242 1 -242 N and N line output 
port circuits 244 a -244„, which are connected to respective ones of 
the N transmission lines 241 1 -241 K . 

An incoming packet at each of the N line input port circuits 
242^242,, is temporarily stored in a packet buffer 246 and is output 
to a line fault detector 247. The line fault detector 247 detects 
the occurrence of a line failure when receiving a packet including 
failure information indicating that the opposite end of each of 
the N transmission lines 241 X -241 N has not received any optical 
signal. The line fault detector 247 notifies a processor (CPU) 
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249 of a detection result indicating which transmission line fails • 

The router 204A is further provided with a packet -protection 
information management table 251A, which is created based on packet 
protection information 253 received from the network management 
server 205 through a server Interface circuit 252. The details 
o£ the packet -protection information management table 251A will 
be described later by referring to Fig. 7. 

The header information of each of the packets stored in the 
packet buffer 246 is transferred to a header searcher 255. 
According to the header information of each packet, the header 
searcher 255, under control of the processor 249. searches the 
packet -protection Information management table 251A for necessary 
information including protection information that indicates 
whether the packet in question is to be protected. In addition, 
the processor 249 notifies the header searcher 255 whether a failure 
occurs in the transmission line to which the packet is to be 
forwarded. The search result 258 is output to a header changer 
256 and a packet distributor 257 . 

The header changer 256 sequentially inputs the packets from 
the packet buffer 246 and, as necessary, replaces the header 
information of each input packet with new one or adds new header 
information to the packet before transferring it to the packet 
distributor 257. The details will be described later. 

The packet distributor 257 sequentially distributes the 
packets received from the header changer 256 to the N line output 
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port circuits 244 1 -244 N depending on the header 1 information of each 
packet so that each packet is sent through a corresponding 
transmission line - 

FORWARD I KG OPERATION AT INGRESS 
5 The forwarding operation at the ingress router 204A will 

„ be described by referring to Figs. 4-7. First, packet formats and 

m table contents will be described by referring to Figs. 5-7 before 

>P the forwarding operation as shown in Fig, 4. 

:Q According to the present invention, in case of failure 

ijTj 10 occurrence in a working route, a packet to be protected is sent 

If. back to the ingress router 204A so as to be forwarded to a reserved 

;iU route around the failure,, which will be described later. 

M= In general, as shown in Fig. 5, a packet 210 has a 

q predetermine format composed of a header field 291 and a data field 

15 292. Header information including source address X, destination 
address Y. and data length is stored in the header field 291. 

As shown in Fig. 6. a return packet 210A to be sent back 
to the ingress router 204A has a packet protection control header 
field 301 added to the normal header field 291. The packet 
20 protection control header field 301 is composed of on inverse header 
information field 302 and a protection switch Instruction 
information field 303. 

The inverse header information field 302 stores address 
information in which the source address is the original destination 
25 address Y and the destination address is the original source address 
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X. Tine protection switch instruction information field 303 stores 
a 1-bit flag indicating whether the packet is a return packet 210A 
or a normal packet 210- Here, when the flag is set to 0 , it indicates 
the normal packet 210, which is to be sent toward the egress router 
5 204F. When the flag is set to 1, it indicates the return packet 
21 OA, which is to be sent back to the ingress router 20 4A. 

In Fig. 6, a return packet 210A has the packet protection 
control header field 301 and the normal header field 291 stacked. 
Therefore, the processor 249 can discriminate between the return 
10 packet 210A and the normal packet 210 by checking the header 

structure of a packet- However, such a discrimination procedure 
needs data storing step, data comparison step, and header structure 
check step, causing the speed of packet discrimination to be 
reduced. 

15 In contrast, according to the embodiment of the present 

Invention, the 1-bit protection switch instruction information 
indicates whether the packet is a return packet 210A or a normal 
packet 210. Therefore, high-speed and simplified packet 
discrimination can be achieved* 

20 Referring to Fig. 7, the packet-protection information 

management table 251A has a protected flow information field 321 , 
a working router information field 322, and a reserved route 
Information field 323 • Source and destination address information 
identifying each protected flow are stored in the protected flow 

25 information field 321. 
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For example, in the case of a protected flow Identified by 
tne source address X and destination address Y, the working route 
forwards the protected flow of packets to the router 204B indicated 
by U B" in the Fig. 7 and the reserved route is not available. On 
5 the other hand, in the case of a protected flow identified by the 
source address Y and destination address X. the working route 
forwards the protected flow of packets to the sending terminal 201 
indicated by "X" and the reserved route forwards it to the router 
204D indicated by n D" . 

10 Therefore, a protected packet 210 as shown in Pig, 5 is 

forwarded to the router 204B for the working route. When a 
protected packet 210A as shown in Fig, 6 has been sent back to the 
ingress router 204A due to the occurrence of a line failure, the 
protected packet 210A is forwarded to the router 204D for the 

15 reserved route* The forwarding procedure at the ingress router 
204A will be described in detail hereinafter. 

Hereafter, the forwarding operation of the router 204A will 
be described by referring to Fig. 4. 

Ref erring to Fig. 4, at the ingress router 204A, each of 

20 the N line input port circuits 242^-242,, is waiting for packets (step 
S271). When receiving a packet (YES at step S271), the received 
packet is stored in the packet buffer 246 and address information 
is extracted from the header information of the packet (step S272) . 

After extracting source and destination address information 

25 from the header field 291 of the packet 210, the header searcher 




255 searches the packet -protection information, management table 
251A (step S273) . If no entry Is found in the packet-protection 
information management table 251A (NO at step S274) , then the packet 
210 is discarded (step S275) and the procedure is terminated. 
S When such an entry is found in the packet -protection 

information management table 251A (YES at step S274) , it is further 
determined whether the protection switch instruction Information 
is included in the header information field of the packet 210 (step 
S276). When no protection switch instruction information is 

10 included (NO at step S276), it is determined that the packet is 
a normal packet as shown in Fig, 5, Accordingly, the packet 
distributor 257 distributes the packet to the line output circuit 
for the working route determined depending on the working route 
information in the packet -protection information management table 

15 251A (step S277). 

When the protection switch instruction information is 
included (YES at step S276). the header changer 256 removes the 
packet protection control header 301 from the return packet 21 OA 
(step S278) and thereafter the packet distributor 257 distributes 

20 the resultant packet to the line output circuit for the reserved 
route determined depending on the reserved route information in 
the packet-protection information management table 251A (step 
S279) . 

Referring to Fig. 8 , it is assumed that a protected packet 
25 210 enters the packet protection network 203 at the router 204A 
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and thereafter a failure 341 occurs between the routers 204B and 
204C on the working route. 

In this case, the packet 210 is forwarded from the ingress 
router 204A to the router 204B on the working route. Since the 
5 packet 210 cannot he forwarded to the next hop (router 204C) due 
to the failure 341 , the router 204B checks whether this packet is 
to be protected and, if so, adds the packet protection control 
header 301 to the packet 210 to produce a return packet 21 OA and 
sends It hack to the start-point router 204A. The details will 
10 be describe later by referring to Fig* 10. 

The start -point router 204A, when receiving the return 
packet 210A, deletes the packet protection control header 301 from 
the return packet 210A and forwards the resultant packet 210 to 
the router 204D on the reserved route . Since the reserved route 
15 is normally operating, the packet 210 travels through the reserved 
route and then successf ully arrives at the end-point router 204F- 
FORWARDING OPERATION AT TRANSIT ROUTER 
Taking the router 204B as an example, the forwarding 
operation at a transit router will be described by referring to 
20 Figs. 9 and. 10, As described before, it is the same with other 
transit routers. First, the packet protection information 
management table 251B in the router 204B will be described - 

Referring to Fig. 9, the packet-protection information 
management table 251B has a protected flow Information field 321, 
25 a route information field 325, and a protection information field 
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326 . since the router 204B is set for a transit router in the packet 
protection network 203, it is not necessary for the route 
information field 325 to discriminate between the working and 
reserved routes. Source and destination address information 
5 identifying each protected flow are stored in the protected flow 
Information field 321 as in the case of the ingress router 204A. 

For example, in the case of a protected flow identified by 
the source address X and destination address Y, the protected flow 
of packets is forwarded to the router 204C indicated by "C" in the 

10 route information field 325, Since this packet flow is to be 
protected, the protection information indicates 11 YES" . 

On the other hand, in the case of a protected flow identified 
by the source address Y and destination address X, it indicates 
that this packet is a return packet 210A. Therefore, the protected 

15 flow of packets is forwarded to the Ingress router 204A indicated 
by "A" and the protection information indicates "NO" . 

Referring to Pig. 10, at the router 204B, each of the N line 
input port circuits 242 X -242 N is waiting for packets (step S371). 
When receiving a packet (YES at step S371). the received packet 

20 is stored in the packet buffer 2 46 and address information is 
extracted from the header information of the packet (step S372). 

After extracting source and destination address information 
from the header field 291 of the packet 210, the header searcher 
255 searches the packet -protection Information management table 

25 251B (step S373). Xf no entry is found in the packet -protection 
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information management table 251B (NO at step S374 ) , then the packet 
210 is discarded (step S375) and the procedure is terminated. 

When such an entry is found in the pacKet -protection 
information management table 251B (YES at Step S374) * it is further 
5 determined whether the protection information indicates "YES", 
that is, the packet 210 is to be protected (step S376). When the 
^ . packet 210 is not to be protected (NO at step S3 76), the packet 

'Z distributor 257 distributes the packet 210 to the line output 

circuit for the route (here, router 204C) determined depending on 
*Q 10 the route information 325 in the packet -protection information 

management table 251B (step S377). 
n i When it is determined that the packet 210 is to be protected 

1^ (YES at step S376), the processor 249 determines from the fault 

Q detection information 248 whether a failure occurs in the said route 

15 (step S378). When no failure occurs, the packet distributor 257 
distributes the packet 210 to the line output circuit for the route 
(here, router 204C) determined depending on the route information 
325 in the packet-protection information management table 251B 
( Step S377) ♦ 

20 When it is determined that a failure occurs on the said route 

(yes at step S378). the header changer 256 creates the packet 
protection control header 301 and adds it to the packet 210 to 
produce a return packet 210A (step S379). Then, the packet 
distributor 257 distributes the return packet 210A to the line 

25 output circuit for the route at which the packet 210 has been 



received (step S3S0) - That is, the return packet 210A is sent from 
the transit router 204B back to the start-point router 204A. 

When the start -point router 204A has received the return 
packet 210A, as described before, since the protection switch 
instruction information is included (YES at step S276 of Fig. 4), 
the header changer 256 removes the packet protection controi header 
301 from the return packet 2 10A (step S278 of Fig. 4) and thereafter 
the packet distributor 257 distributes the resultant packet 210 
to the line output circuit for the reserved route (step S279 of 
Fig . 4 ) * 

As described above, in the case where a protected packet 
210 cannot be forwarded from the transit router 204B to the next 
hop router 204C due to the failure 341, the router 204B produces 
a return packet 2lOA from the packet 210 and sends it back to the 
ingress router 20 4A. The start-point router 204A. when receiving 
the return packet 210A. deletes the packet protection control 
header 301 from the return packet 210A and forwards the resultant 
packet 210 to the router 204D on the reserved route- Since the 
reserved route is normally operating, the packet 210 travels 
through the reserved route and then successfully arrives at the 
end-point router 20 4F . Accordingly, the packet 210 to bo protected 
can be transferred to the destination terminal 202. 

In this manner, packets conveying important information can 
be protected and, in case of occurrence of a failure on the working 
route, the packets to be protected are transferred through the 
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reserved route to the destination at high speeds. Therefore, no 
substantial delay is generated and real-time data transmission can 
be achieved. Further, when normally operating, the reserved route 
is not used. Therefore, both the worKing and reserved routes are 
5 not concurrently used, avoiding unde sired occupation of network 
bandwidth, resulting in improved efficiency in the use of network 
bandwidth . 

In the above embodiment, the destination address of a return 
packet 210A is set to the source address of the packet 210 so as 
10 to send the return packet 210A back to the start-point router 204A. 
Alternatively, special information indicating that the packet is 
to be transferred through the reserved route may be written or added 
in the header information thereof. It is necessary to designate 
at least destination address of the ingress or the start-point 
15 router in the header information thereof so that transit routers 
transfer it toward the ingress or start -point router. 

Although the simplified network as shown in Fig. 1 is taken 
as an example, the present invention is applicable to more 
complicate router networks . In such a large network , a plurality 
20 of reserved routes may be set in the network. 

In the above embodiment, the above- described functions of 
the network management server 205 and the routers 204A-204F are 
implemented in part with software. Needless to say, the 
above -de scribed functions may be implemented with software or 
25 hardware. In the case of the software used for implementation of 
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the functions , the programs can be recorded Into a recording medium 
or can be transmitted, through the network. 
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